CVE-2026-109837 | Apache OFBiz up to 24.09.7 Order Returns createReturnItem authorization

SecurityVulns
Yanac

A vulnerability classified as critical has been found in Apache OFBiz up to 24.09.7. The affected element is the function createReturnItem of the component Order Returns. This manipulation causes authorization bypass.

This vulnerability is tracked as CVE-2026-109837. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More